This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/3134382e3234332e39392e302f32342d3234203d3e203238353039.roa
File:                     3134382e3234332e39392e302f32342d3234203d3e203238353039.roa (raw, json)
Hash identifier:          nJX+mnBFxJD2X0NdGZIXFtT9FRcXjEUXaW/VJ7Lv5jU=
Subject key identifier:   BA:77:79:33:DA:E8:34:B9:73:99:26:42:DE:91:51:BE:5B:89:D9:09
Certificate issuer:       /CN=A5775070634FFDF3D8D1C719952093594A54C76E
Certificate serial:       7EBADBA3ED5B93D6283A2483514A6916AC8BFA81
Authority key identifier: A5:77:50:70:63:4F:FD:F3:D8:D1:C7:19:95:20:93:59:4A:54:C7:6E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5775070634FFDF3D8D1C719952093594A54C76E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/3134382e3234332e39392e302f32342d3234203d3e203238353039.roa
Signing time:             Tue 06 Jan 2026 19:14:52 +0000
ROA not before:           Tue 06 Jan 2026 19:09:52 +0000
ROA not after:            Tue 05 Jan 2027 19:14:52 +0000
asID:                     28509
IP address blocks:        148.243.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/A5775070634FFDF3D8D1C719952093594A54C76E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/A5775070634FFDF3D8D1C719952093594A54C76E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5775070634FFDF3D8D1C719952093594A54C76E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 15 Jan 2026 23:57:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:ba:db:a3:ed:5b:93:d6:28:3a:24:83:51:4a:69:16:ac:8b:fa:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5775070634FFDF3D8D1C719952093594A54C76E
        Validity
            Not Before: Jan  6 19:09:52 2026 GMT
            Not After : Jan  5 19:14:52 2027 GMT
        Subject: CN=BA777933DAE834B973992642DE9151BE5B89D909
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ff:e1:33:f0:09:f5:3b:89:0a:03:c1:07:24:
                    86:a2:1f:f0:32:c3:ef:ab:ac:56:b5:7e:e6:ac:92:
                    f2:94:f3:c5:80:5e:bc:5a:5a:46:bb:68:04:7f:75:
                    a1:36:7e:21:4a:37:9d:d4:23:be:32:56:6f:e4:91:
                    51:6e:d7:3c:67:4b:7e:3a:9f:0f:15:07:a0:55:11:
                    f1:1f:14:3d:5e:7b:3d:92:77:e3:1c:42:46:b3:e2:
                    b9:84:c3:57:b7:12:1b:17:1f:b0:a0:64:92:ce:0f:
                    75:0e:33:92:6a:da:de:3f:1f:2b:af:8d:ef:12:c1:
                    3e:fd:40:8a:b6:a3:64:3c:d2:76:56:41:9d:ad:fd:
                    2d:bc:90:a8:93:7b:86:e4:ec:18:d2:39:54:7b:eb:
                    f1:20:26:7a:34:ae:c7:84:43:a2:21:fc:48:12:23:
                    34:77:da:d3:ab:1a:dc:f9:a8:b3:3b:e1:0d:78:26:
                    93:a8:92:6d:06:d2:69:3a:75:9f:a9:69:c3:a0:0e:
                    ac:bd:01:7f:86:29:41:9d:9f:41:07:9f:fd:2a:46:
                    49:e6:45:a8:c5:e9:81:3a:d4:92:54:c5:a3:45:9e:
                    70:21:99:e3:c1:ab:a8:40:7b:b3:42:30:7e:1d:a9:
                    bd:07:c0:57:8d:7e:f3:f7:70:7a:f4:5c:70:49:fa:
                    36:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:77:79:33:DA:E8:34:B9:73:99:26:42:DE:91:51:BE:5B:89:D9:09
            X509v3 Authority Key Identifier:
                keyid:A5:77:50:70:63:4F:FD:F3:D8:D1:C7:19:95:20:93:59:4A:54:C7:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/A5775070634FFDF3D8D1C719952093594A54C76E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A5775070634FFDF3D8D1C719952093594A54C76E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/FE6B8445889B1A1779C3246FACD0462DB2F3D14A955EC2CEC3FC55DADCECD561/0/3134382e3234332e39392e302f32342d3234203d3e203238353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.243.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c4:40:2e:76:86:7e:ab:16:06:70:fd:9e:65:e5:b1:60:a2:a4:
         e5:76:ce:b5:34:fc:d0:41:47:85:ae:54:b6:f2:f0:b9:c0:b7:
         83:a0:8b:40:48:6d:6b:7c:73:ad:37:93:6c:9e:17:54:52:c1:
         11:a6:c7:b7:86:81:d7:68:30:e2:63:b0:b3:ed:f4:67:a4:ab:
         85:c7:1d:95:fd:29:a0:c6:75:4d:58:e1:31:23:dc:7f:c6:dd:
         da:14:cf:e2:a1:22:c1:65:07:f4:a4:fe:f8:95:79:2a:b6:45:
         54:03:b7:75:b2:eb:fa:cc:a5:7b:5c:00:8a:70:1b:ab:60:c9:
         5a:22:c3:8f:5d:02:27:1d:15:94:b6:a7:51:e9:d6:9a:6f:4f:
         11:74:07:5c:a1:3c:04:24:71:23:0b:95:35:0b:c1:39:58:1e:
         c5:35:a1:21:8c:9e:6e:2b:cc:fe:09:f9:11:88:49:df:29:eb:
         65:1d:71:fe:29:6c:6a:8a:8b:24:be:c5:55:a1:de:87:f3:76:
         89:cc:d4:c5:92:14:0a:6c:1d:25:17:72:b3:37:de:18:12:8f:
         c7:1c:8a:da:2d:1d:c5:61:39:b8:4a:e9:ec:72:e5:40:92:3e:
         6d:47:1e:86:4e:9f:c0:04:10:bc:02:1c:af:50:6a:55:d1:03:
         d9:50:3b:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 12 09:09:18 2026 by rpki-client